Philip Åkesson

Security and embedded systems.

@[email protected]

[Tim Blazytko @mr_phrazer]

We at @emproofsecurity open-sourced a free firmware reverse engineering workshop for self-study.

Topics: ELF analysis, cracking, malware triage, embedded-Linux, bare-metal, crypto-key extraction, anti-analysis. Docker setup and solutions included.

https://t.co/fA4N0ugJr7

[nSinus-R (@[email protected]) @nSinusR]

Our work on solving @Raspberry_Pi's RP2350 Hacking Challenge is now online! 5 different attacks and lots of lessons learned.

Joint work with Aedan Cullen, Kévin Courdesses, @ghidraninja and @azonenberg!

Full paper: https://t.co/iYuoPpBMCi

Source code: https://t.co/BkYj8kqpqK

[Raelize @raelizecom]

Google Wifi Pro - Glitching from Root to EL3 - Part 1

In this first post, we explain in detail, how we were able to inject EM glitches in order to characterize Qualcomm's IPQ5018 SoC susceptibility to EM glitches.

https://t.co/pC0Pel4CtG

[Tiny Tapeout @tinytapeout]

Efabless is shut until further notice! Read this post to find out how past, current and future shuttles will be affected.

https://t.co/lVdApy04zb

[Philip Åkesson @PhilipAkesson]

@MehdiHacks The brand is Checkline (their slogan is "Made to measure"), and the screwdriver looks similar to this digital torque screwdriver https://t.co/ehUHfyNymL

[HN Security @hnsec]

Developers assume code runs deterministically, but fault injection attacks can prove otherwise.

Are these attacks really “magical” and unpredictable? Or is there a method to the madness?

Join @0x696e6f6465 down the rabbit hole of #hardwarehacking 🐇 🕳️

https://t.co/L2RW1nuKoV

[@1bitsquared but not here @1bitsquared]

Hey everyone! We have some great news! The @hextreeio ( aka. @ghidraninja and @LiveOverflow ) Faultier and GlitchTags are now also available in the German (EU) store! Get them now! It is only a small initial batch! :) https://t.co/oF03EIIujo

[Gabriel Gonzalez @GabrielGonzalez]

I have finally release my book on Attacking and Securing U-Boot! The goal is to provide a *hands-on* approach to the bootloader via a VM that includes practical examples so any security consultant or embedded developer.

https://t.co/sZfpmii1y8

[/dev/ttyS0 @devttyS0]

Binwalk v3 now under active development. Faster, smarter, Rustier.

Beta testers and bug reports welcome!

https://t.co/8pnMIiPpCX

[hextree.io @hextreeio]

We have a few seats left at our in-person training at @hardwear_io 2024: Applied Fault Injection 2.0

We've added new targets (including a RISC-V target) & new challenges, and you get FI targets & equipment to take home.

Learn how to hack chips with us!

https://t.co/L01fvAoLqm

[@esden @esden]

We at @1bitsquared started a collaboration with @hextreeio ( aka. @ghidraninja and @LiveOverflow ). We are now offering the Faultier power glitch tool and Glitch Tag targets! They work great with @hextreeio hardware security courses. https://t.co/KFgvwBbnT2

[atc1441 @atc1441]

The NXP LPC2388 Read Protection fully bypassed 🥳

Video blog📽: https://t.co/Q1zN3IfYW2

[Tim Blazytko @mr_phrazer]

Happy to announce the release of our LLVM-based (dis)assembler framework, Nyxstone. It supports all architectures of LLVM, label-support in the assembler comes with Python & Rust bindings.

[Dmitry Nedospasov @nedos]

We published our favorite moments from the first month of our Hardware Hacking Bootcamp. Our second month is just starting now. Join now 👉 https://t.co/1ggrje0tVQ
https://t.co/jLMJVtWvbc

[Matthew Venn @matthewvenn]

Riscure's @jzvw designed a chip and taped out on Sky130, then decapped it and sniffed the AES keys with a near field probe!

We talk about it in the next Efabless webinar: https://t.co/UuxUoSWOAM

[JP Aumasson @vt_0_]

Cover reveal! 25% discount on B&N pre-orders at https://t.co/cDmC4pcUgx

Had a blast working with @billpollock's @nostarch again.

Please repost :)

[Travis Goodspeed @travisgoodspeed]

MD5 4d37c6712a2239962005eda3be6367b4

[Philip Åkesson @PhilipAkesson]

I finished the challenges over the weekend - and had a lovely time doing so. I can highly recommend this to anyone with an interest in hardware security!

[Tom Clement @Tom_Clement]

It’s launching as a kit containing the Bolt, an STM32 SWD debugger, cables and probes, and a wicked STM32F103 target board with hardware security challenges.

Accessible only to participants of the European Cyber Security Challenge 2023 before, and now available to all! 🤩

[Raelize @raelizecom]

Fantastic work by Courk on performing a SCA attack on the Flash Encryption feature of @Espressif's ESP32-C3 and ESP32-C6: https://t.co/HhXCDzDbRb

A custom board is used to perform the attack, which requires no external (expensive) oscilloscope. Also, a temperature controlling circuit is present to stabilize the temperature of the target.

Interestingly, the attack was still feasible even though the ESP32-C6's AES engine is supposedly hardened with masking... Interesting!

[YosysHQ @YosysHQ]

YosysHQ is hiring!

With the start of the new year we are looking to add both an EDA Formal & Synthesis Tool Developer to our team. Find all you need to know via the link below & send your application to [email protected]

https://t.co/PbhBa6zJa1